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^ED STATES PATENT AND TRADEMARK OFFICE ^ Q 

IN RE APPLICATION OF: Masahiro TAKAGI, et al. GAU: 2661 ^ oo <£. 

SERIAL NO: 09/862,440 EXAMINER: ^ ^ £n 

FILED: May 23, 2001 ^ 

FOR: COMMUNICATION CONTROL SCHEME USING PROXY DEVICE AND SECURITY PROTOCOL^ 

COMBINATION 

REQUEST FOR PRIORITY 

ASSISTANT COMMISSIONER FOR PATENTS 
WASHINGTON, D.C. 20231 

SIR: 

□ Full benefit of the filing date of U.S. Application Serial Number [US App No], filed [US App Dt], is claimed pursuant to the 
provisions of 35 U.S.C. §120. 

□ Full benefit of the filing date of U.S. Provisional Application Serial Number , filed , is claimed pursuant to the provisions of 
35 U.S.C. §1 19(e). 

■ Applicants claim any right to priority from any earlier filed applications to which they may be entitled pursuant to the 
provisions of 35 U.S.C. §119, as noted below. 

In the matter of the above-identified application for patent, notice is hereby given that the applicants claim as priority: 

COUNTRY APPLICATION NUMBER MONT H/DAY/YEAR 

JAPAN 2000-151434 May 23, 2000 



Certified copies of the corresponding Convention Application(s) 
■ are submitted herewith 

□ will be submitted prior to payment of the Final Fee 

□ were filed in prior application Serial No. filed 
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□ were submitted to the International Bureau in PCT Application Number . 
Receipt of the certified copies by the International Bureau in a timely manner under PCT Rule 17.1(a) has been 
acknowledged as evidenced by the attached PCT/IB/304. 

□ (A) Application Serial No,(s) were filed in prior application Serial No. filed ; and 
(B) Application Serial No.(s) 

□ are submitted herewith 

□ will be submitted prior to payment of the Final Fee 
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OBLON, SPIVAK, McCLELLAND, 
MAIER & NEUSTADT, P.C. 





Marvin J. Spivak 
Registration No. 24,913 

Joseph A. Scafetta, Jr. 
Registration No. 26,803 
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mmmiztum^tit^mM^mu^ v < &%mmizi&%;znt=.mM$%mmn(D 
\zmum$m*mu t m mmmm^mw: t<omizm^ti^i<Diz^zLV^^ 

Hf#3C4] 

mm^m^mmf$2<D^^.=LV : r^ ryis^-i/Byizmt&mmi*. tarn 

nmm iz Jtx m s n itumti&zmn nmmmiz&mz nt^mmm^mm * <z> wrc 
mm®, & &u-t s mm © t=. & jct&K fc*ws*is« n mmmm^mm t <d m iz n 
^sti€>^icD-fe^rrLy^-<Ty^x-i/ 3 >{c m-t z> mm. TbmmmMm^M 
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mmmm<Dpimzm^^xmmmMm^mmtmmmm^mmit.(o^x^m 
mxmm®. *um°t z>m.mv>fc®> Km^mm^mn t. mmummmmu nam 

r V 2/ x - */ a > Id H "T £ « H & ffl v ^ T Si ft £ ff V \ , 

ornxmrn &=fr o it #> ©n 3 © -t # a y ^ -r r v s/x - */ a > ic gi-r s tt^s %ia 
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xmrn®. *uu-tz> mme> t=. * izmmmMm^mw: t. mmmm^mmn n&miz 
Mfeznz&i <d^^=lv^-^( rv s/.x-s/a >izm-?z>wm. 75Mi&ia^i © 
tf-bv^4 mm & ft l t m&timvsm&m. t wmmm^mmh <d m xmrnm 

mizWtfeZft&f&Z <DiE^^V^-< TVS/x-S/a 3g£. %2<b>f 

ifeif^, t&iam i <of- bv*4 mm-frbmmm 20?- w ^4 mmzu 

*/K- hMJ«Jt(Z)ffi#^^JfflLfe*^SS:BoS35[^^$tifemi&t) f m2(D-fe 

- b^^^mmzBi^m-tx.mt. 

Lfcmm&> mmmi<DV-bv*^mmfr%ifimm2<D>f-bv*'[mniz$£ 
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*mm b r toian 2 <d?~ v v x. <i mmiz & wra-res ft& x@ n 

Ii©^f- h^o:>r^g^iii©LfeBffia'»#$:*^ , -fe;Hi:'rsm2^^- 
t&sa* ^-fe Mb 2 nr~mmfr h*zf-t)v^mv^. mm* y 

B&gBSg 3 ©>^- h t> * 4 mnfrb m ft r~mm z * /Mt-t s # ^-t 

& Ml V tc r H *m®L £ ~?2> >f- V V x >f ilo 

1 1 ] 

mm& i wmmmmum 2 ©«fg^gh©fre$&iiffi£&i£?-£Mfg©fc#>ic 

, irffSSg 1 ©SfS^gilfi 2 <DmmmWh<DmzMfe2ft2>& l ©iz^ y 
TV S/x- 3 >lCK-TS«^S:«#-rs^ 1 ©iz3f^ U ^ fif $B£SJ$#m £ > 

B&sBfg 1 ©s^g i:i2 © h © mxmm®. & mtt zmmztprnt 
&mzmm&i<n^*^VT4T)Sis^-isa>KM?&mm*:%]misX. mm 
m2&mmmm : b v < urn 2 (Dmmmmiz&mztizm^tztifcmmz'&^t 

mmu^t^titcmmizm^xmmh^y^- hm&>±<Dmm*mmisX 

mm^m^mt^mm-t^mm^mm^KDiE^^v^^ rvts^-^ny\zm 
•t&mmzmm^xmmit-t&mmm^it^mn 
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*y hU-?lCJ:o"r*BS:iCjiM«rfg&2ll ©jl^gil^2^)M^S^© 

ttfiam 1 <z>s#^g urn 2 ammmmt. <d \%vmm& * uu-? zmmztpm? 
&mz mmm 1 <d -tz * = a u ^ >r 7 v ^ - */ 3 > k m -t z> mm ^mmvx. mm 

z n m v £ z. t & t •? % # - h * x >r & m o 

[0 0 0 1] 
[0 0 0 2] 

mm<D&ffil 

„ TCP (Transmission Control Protocol) ^^It 1 — ^ jtMlCfeVNT'©® 
[0 0 0 3] 
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<fce)lC^tf-StiTV%S„ A^ryhig^tt, S3— 5>-^>*#-i§-£f#oACK#fi£ 
[0 0 04] 

HI & £ b T v \ £ tt ft C t - # £ £ tt L T it & r £ IC 5 . 
[0 0 0 5] 

^tt*t«tfc^»©J»lit»^K:) . TCP©ttffi«:iRr±s-&*fe<H)©yn*s/- (pep 

: Performance Enhancement Proxy) ^^A^'S^ISj^fil^i^ tlT V^<5 0 
[0 0 0 6] 

Split Connect ionic £&3M£tt % TCPn* * 3 > fcProxy (J^T"^«TCP-GWh 
Pf^) tC^T, ■^»«ITCP3*^S/a>fc*liliflrTCP3*^S/3>i:JC^SI'rS 

[0 0 0 7] 

MTCPiiselective ACK^-^i/a > (IETF RFC2018) SgoT, ffiW^ y hS£c 
ffl I C L £ =fo <D T? & o T %» J: V % Q 
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[0 0 0 8] 

Snoop proxylc <J: -5 TCP-GW#TCPn # 2 */ a > £ £ L T L £ 5 

(Z)"^ TCP(DX> K • ^> K"feV>^>f *X (TCPCDACKtf^M^CJIoTSfcfc 

V^^^SlcMj^t-StjCDT^So Snoop proxy!*. TCP-ir— #rt*Ty b$:A i y77 

oT3fe£l$/&T?ACK£^#^CtfiijtU Ay77bt^fcTCPf-^ W>y h £ 

^GD^&S^-, fi^ACK«J^^LT, Snoop proxy^TCP^ 1 - # 7\°^T y h (DHj£ 
fcff^o Snoop proxyli^-f AT >7 hSm^fr^c <fc o IC bt, ^ 

[0 0 0 9] 
[0010] 

<<yZ-%V hlC^^^-fe^rn.U^Y5t^<Z)^^^i:bT, IPSecfCfcSt)© 
(IETF RFC2401, 2402, 33 £ t*2408fc £*) „ -fe^cx y & W¥ 

T*H&£*1£#. IPSec&IPjf-ei2 3r3.y-x--f $:MtSfc«!)0^t^5. IPS 
ecx*», (l) iP'vy ^©M^-h-e^3l$ti^v>^t. (2) IP^>fn-FlC 

^LT^-##^£&±T?&^£nT^&V%z:£^ (3) # ##5fc<DSzl 

##ic«fcoT£f££;ixfc:i^ ^^lE-rs^llg^fe^o rcDfe^icii. Ah (Auth 

enti cat ion Header) & % IP>\>y #£IP^>f O- tfWCjf A tt*U£ & £ 

^vn„ n>/<-f n- Kic*fbT, SJHtt, 3fc&cD£^z:£. £ J: 

J:&£j&£'£fiE-r&«ifg : &&£o Zl<Z>£:#>tC&. ESP (Encapsulating Security 
Payload) &Mvn£ 0 AH£ESP£M*"&:b1*T^e> Zl £ fc*T?£S„ 

[0 0 1 1 ] 

IPSec^>MobileIPT^i, IPSec^Mobi leIP©^||gS:#o^- b ? i-f^tt 
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[0 0 12] 

m$&^mn£.<DmX*mm*4f 3|gHC. TCP-GW#MSnoop proxy© <fce>&TCP©& 
[0 0 13] 

*J. TCP/\y ^^tIPSec^ci:oT^M$4^TV^SIP^>r^- Kic-g-^ns^ 
„ TCP© 4£|g£fai:£l*:£ Proxy & % TCP'vy #{C-££*l£ff$g£ftJ 

sriiir-e^SKfcSo rti witcp-gw e ACKfif # £ £j* & ifrsitf^ < 

-SfcftT'&So JgiC^^tl^^-^lC^EttSrM^-fSi:, TCP-GWBMSnoop 
Proxy&TCP^y 4f©^#**JR*lfeV^©-e, £*§fr&gfr##^ «ftglC&5„ 
[0014] 

IPSec^MobilelP&^^JM^tlS ©3£cp:lCProxy^M#& 
£t§ll!\ ^.(DproxymmtmmzmmL^W ^i?^e>, M^fcCTCP-GWtf^-fe 

ftLTV>£>A'>ry b©^y^&M^T*, ^O^y n - K#TCP/\°>r <y 

[0 0 15] 

^•Zl-e. *^^tt±IB^*©^S^lC^»T«;$tlfe : fe©^. TCP-GW^Snoop 
ICf^StlSProxyglfi^ IPSeclC^$tl-5-fe^p3.U^-< h n^/fc SrJfi* 



9 



£iJ|E# 2001-3047416 



#2000—151434 



sic. mmmm. mmmu. &*xmmmmi3m<D&&zuto£'t&o 

[0 0 16] 

mizu^tit=.mmm^mm n amm^u^ s tifc^»ss*sic n <d mx h 9 > 

C £ irfiH^«S^^e £ <Z> -e&Ett 5: &§E § Sifg © £ #> ic , fffSB&ii&ISg^ 
IC 18 -T S ft $8 5:MtSll0t^a';f>f fit#&#Sf £ . ffi3B*tilSS85fc$S« 

n mmmm^mmn n v> mxmm®. *$mt zmm * s ibs izwrnm 1 -fe 

=l y ^ r V i" x - 2/ a > ic Mi" £> fflf* £ #J M b T BafH^^g^Igg % I, < tela 

*t*&i e> i: . mm*PM^mmm? z> mm z mmm kd^^^vt 

[0 0 17] 

-eft #©isi£ sr'fs&fELfc *tm £ 0 e> #> jc . #rtiB&ift*S3&sc t mzmms^m 
<fc tytrfiB^^m^^iiicis £ x«f £ b fe«#ic^ u xmmm 1 
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[0 0 18] 

&&m<Dmmmmz. mmmizi&ig2nf=.mmm^mn : bv<izmmm 
m*m.uo> t. & mx*m m& & z mm<D & #> iztfimmM^mm t mmmm 

mm *fi o t=. «> {citfiB^ii^^^e n mmmm^mn t <Dmizmj£ snsi2 

[0 0 19] 

izs&m s n ^ mm^^n n © m -e u sis £ #n -r s 3t#<z> & #> icttr 

£ £ <D m izmfe £ *i £ S£ 1 © -fe 3f ^ U ^ 7 V V x - 2/ a 

[0 0 2 0] 

mmmiz & ^ r , t ^sa^^^g iz « w e> ti^^^nic^f 

flBMIft«B^SI1K £ t&8BWI§S85fcSm2: © MTftEtt £ f 2> to ic ffflE 

ftlft$i;ftgtt £ fc©IHK:«£3ft**i©**:iyT--rTV2/ 
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[0 0 2 1] 

mmm iz&^x. mmmm^mizm^ ^xmrnrnM^^mm n mmmm^m 
n t. © mx (pfg&js & fj o ^m^m. z mft s s & sir i, , ttfia 
&»f^ s \tnmnmm^mm n mmmmnmn t. © mxmm®. 

i©t*ayT-f7yS/i-^a>K:BIt* AMI, BMtaia^^^^S i: IMS 

£ mmmm^mm n © m tc a ti s « 2 © -t * 3- y 5=- ^ r y ty ^ - $/ a 

£ fc©ia"eji#S:ff^fcftO»3©'fe^aU-5 i ^ 

ry^3i-.^H>K:g5i-*«**«3feLafiS:fTt)-&«aiR#Si:^&#rta*i 

So 

[0 0 2 2] 

u®znfcmmm*mm£<Dmxv-hy*>rmmzfi-isXh : 7>*tf- vmsx 
±<Dmm<D*m*ft?mmfflWj;mz&^x, #i x^iw&a-bT 
t&wffiMtt&n z mmmm^mu n © wt? » h« & mmn & ft tc t& 

£ftlft*fti$tt £ t&iS#Jl*S8*tStt £©Wfc«£SftS*Sl©-fe3f*y"T^yy 

£ tHB^ra^gsff ^ © we iff mmrnouu. *umv &mm * n ? & ft 
ic «r iaas^s ag^© £ tffffi^ ifegag^gig £©wc«£3*is«2©-fe3r3.y-T--r 
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n.y-5^ TVS/x-S/a>KlB8-rsfll#&fafflb , rf&flB«2©^- h^a:>fM 
[0 0 2 3] 

it b T fMBftlft*B;£fg1E £ trffi^»«*«« i: © fc ««"T £ M© 

*b Jcfcf»aeKSS5fc$S« t tfre^»S»*i6* 4: © IS S *i & » l © iz * a y ^ 
-f 7VJ/x-S/a>C|«t5fl«|, ^MaaSH^ 1 ©4*- h #x.>f b Tiff 

fB^sg^as t «raa^»«*«« t. © tsr* tfrsattff ©sstfc & b £ if 
e> #> c mmmmnmmm z. mmm^Mmm t © b jc«£ s *i * # 2 © - t * a 
y-^-r rvs/x-s/as/jcBrr^flNis:, 120^- x^ittcBisarrx 

e ttgBftlft*S3i$iC £ tMB^iK*85fiSStt £ ©Kl© t«fB&E4£73rMB&!BigiiE 5: 

#SEb ffflBlll ©^~ b^ai-r^M^e>ltflB^2©^- h^a:>f^fi 

^>X3j<- hMJ^Ji©*#^^Jfflbfe*m^a$:BtfSa5[^^tifemi^^2 
©-fe^ro. y-rw TVS/a:-*/a>K:B8 , rsflHI&tJf«fffib9>XjK- hJBJSU:© 
JRJB&JPJM bTtfrffilB 2 ©4*- b ?3:>fl6*K:a3^TgMeS*iSXg4: 

o 

[0 0 2 4] 

4utlWHK:JR*S*tfc^»ii5lc«1Bi:©lffl^b9>^3K- h »#.£©*#©#» 

Jt©fif 3g &5fiUS b T *m &ff e> frW** SrWW b > &5S 

$r^fe>^3©^- h?x-f^«£l, Kf|B*3©y-b9x>f«S^fe3ai&tlfe1ll 
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m & % Mt -t & # ^-fe Mt^m n & mm £ ft £ = 

[0 0 2 5] 

s^ts^ i (dm*=l v^^wmuw^mn. mmm i <Dm.mmm.nm 2 <d 
mmmm£<D&vmm&*&u+&Mm&$m'*&mtzwi&m 1 r«. y ^-^ 

j8i3sec5e«aftsie^baftfe««&tt#ft^*fli«tt#ft#ai:. matte 
^fcznt=.mmizm-3^Tmmh^yx#- hm$k±<omi&mmLTtpm#m 

b#J?£cSft£ 0 

[0 0 2 6] 

ommmn t <d mvmm®. zmu-t « mm® r=. «> ic> %ga& 1 © atM^e ^2 

i^^tsf l ©-fe * a y t- -r fit , iaiBSS 1 <z>M#g@ £fg 2 © 

mmmm t amx-mm®. £ «a-r s an % tp*-r * istc tafias 1 ©-t^y ^>r 
r y s/x- s/ a >icerr s «««:5pjffl it, b&ih^ 2 <Dmmmm% l < \tm 2 <D 
a#««ics#sftsie^ftsftfeit*&tt#ft-r*fli*«-&fl:#«i:, ftria^ 

y^-ymyizmir^mm^mmLxmm^^mmm^it^mH^^m^n 
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[0 0 2 7] 

[0 0 2 8] 
[0 0 2 9] 

H 1 {±*%iCD ^ 7 h y - 9 MT-fe U , ;P-^70 15:i^, * v h t7 
-^20 l{Wi:*>y h»7-^ 2 0 2$[£llC:$H-t£*i2>o £*l&©raT** v h»7- 
^M#CD^^M^oTV>T=fe^*>^V> 0 *yhy-*20l »^iltSIR(C^MS 
tlfcTCP/IPSgfcfcl 0 1 — 1 O 3 (^!ft*B3|ti£1E) fciR^U I?/Vr v V £3*^ 
7 0 1 lC<fcoT*s/ ht7-* 2 0 2 £:*BSg^£ *lT V^- * 
y 2.0 1 £.mUO*V h hV-V 2 0 2iC^StlT 

SfcGDil^S., fit, #»©^tt#W©#«fcttteBB«T&S. ^l&ttMobile 

%V 2 0 2&TCP-GW4 0U40 2 fclC<fcoT*y 2 0 3il2 

04^1, TCP-GW4 0 3 lC«fcoT*ifeM3 0 5 i: 3 0 6 £ ^tl-?4xiR^t--5 

o 

[0 0 3 0] 

TCP-GW&Snoop Proxy© «fc fcTCPfc^Hj b fe U > 9 MW&mffi*W~D J - FT* 
&oT=k&v>U JSC— A8l&fc^n^>-^tfT-&oT%li*>fcV^, ^TT'S 
TCP-GWT'^-TSo hU-? 2 0 2&-fe=3f:x V^-ftf- A 6 0 1 

o *y K?-* 2 O 3 £ 2 0 4 ^^Jl^ifeM 3 0U3 0 2, 1%M3 0 

3 1 3 o 4 i%M3 o i o>^v r\z.\,%m.mm\zism^M=.^m^M 

50U5 0 2, £%M3 O 2 (£>jd 1) TiC«^HlCitX^$tlfe#l*^* 5 0 3 
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„ mmms o 4 <3Dxy T^a&MMizi&!g;znfe®m%z3i5 o 4 1 5 o 5, &j& 

13 0 5©0QU TlCttMi^MlClR^$tlfe^i&a§§*5 0 6. ^1,12^3 0 6 
CDxUTiC«M«SiNlfCJR^$tife^i&^5 0 7fc5 0 8^#«t5^1?:^b 
TV^„ ^1&3§7^5 0 1 — 5 0 8 (Mi^^ilS) «TCP/IP^-e$>S 0 
[0 03 1] 

zcDZzfteftuyv* mx^mi o i o 1 ©r^-eiPsec^frjM 

LT J £*zrV'r>( ZUUlsttCP/lPMmZfto^ZMfe-f&o IPSecfc<fc£ji 
i§*:?rofc&>fclZ* 3g*l 0 1 H&M%&3i5 0 1 fc(D|^&ClPSec SA (Security A 
ssociation % J^TSAilga-T) tlT V>£ o 

[0 0 3 2] 

SAl£~#|«I0W^£j3rr<Z)T?. ^IoI(Z)g5^lCl±2o©SAA^||i:^S 0 lo 

(jDSAicjiM^ns-fe^rnu^-f zfu haMi i otcsn^^ti-So -fib, &>^&e> 

2&©ITe^ffctf>SA£^5ei,T=&&^., SAfctigrj-TSfiNlkJ:, (1) SPI (Secur 
ity Parameter Index) „ (2) IP destination address, (3) Security prot 
ocol identifier® 3 O^fe-S,, SPI&n — jfr/l/T?— S&l^y h^J^&So SPHi 
, AH33J:tfESP'\y**K:-£i;*U ^fgffiiltf^g/^y hZ&m-t&fctoiZ&m&S 
kZ8;l£tZ>fc&>K&£>tlZ>o IP destination addressttSA© ^^,5: 3ti"„ SA© 

T^&V^o Security protocol identifier^ SA#AH73rMESP£^5 fr^fr&xk 

to 

[0 03 3] 

-fedfrLU^TVi/ai-^g (SAD) tCtt, J£AT<£><fc ? &ff£S 

[0 034] 

£ #> IC^ffl $ *l £ o 
[0 0 3 5] 
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[0 0 3 6] 

• Anti-reply tf-r y Ktf :AH£fcM:ESIWry F#£I3 Z&W&'G'&^Z. 

[0 0 3 7] 

• AHW#:^UT>H/=fi;XA, fcJ: AH IC 683^5^* 
-#„ 

[0 0 3 8] 

• ESP«?g:8£#>fb£^iEy;i/dnjXA. §t, #J$Hfc<Z)4ii. ^<Z>£#B^ fcJ: 
0ESPIC»^-T 5 ^ ;* - # o 

[0 0 3 9] 

• sA(D^#Np^:3©sA^gf^^sA-ett^#i^.e>ti^^^ii&e>«;v^ b^-* 

[0 0 4 0] 

• IPSec^n bziJl^- F: h>*;K hM^-f^ F#- F^- 

K. 

[0 04 1 ] 

• Path MTU:^M£*lfc^:*£>ft;Mransmission unit (IP? ^ y V & W 

[0 0 4 2] 

^-if©3KU 2/-iC<fcoT, IPSecS:VN^lCIPh^7W ^/ ^ICJi^-rS^S:^ 
ASrt^S. UIPSec$:igM-rS^5b\ ^/B"tS £<Z)SA£ 

(SPD) lZ-££;flTV^c 
[0 0 4 3] 

SPD(D:t> h U te, J^T©selector&CJ:oT}g#>e>*l&o 
[0 04 4] 

• Destination IP address: fggg & ^i" % & o V*,, 
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[0 0 4 5] 

• Source IP address:fgH£^-f-%tf)'T?&oT : fc.&V^ 

[0 04 6] 
•User ID:ix^.^ACOrL— !fUS(I^. 0 
[0 0 4 7] 

• Data sensitivity level 'M^lb^^ O Vte^^frft. En 

[0 0 4 8] 

• h^>x:K- hMzru h:n;i,:UDP,TCP£££#i5£-r£:/n hn;i/## 0 

[0 0 4 9] 

• IPSec 1*3/1/ :AE. ESPBMAH/ESP 0 

[0 0 5 0] 

• Source and destination ports:TCP72rl£UDPCD7}\ — 

[0 0 5 1] 

• IPv6 class, IPv6 flow label 

• IPv4 Type of Service (TOS) 

ZL<D£5lzmfflZn&S?V<D&^>h U 10#±(2SA#*fJ&l/TV>£ 0 
[0 0 5 2] 

Shl$^m~£WL&L"C : b&^i}\ Internet Key Exchange (IKE) ICioT SWjtft 
iC^Jg-r&ZlilfcorfgT'&So IKEtt2o07ac-XC^ltblX^o 7x-Xl 
T'tt, IKE SA&i83£L-?-©^CDjifgtf>^£ : &03o 7x-X2tlt IKE SA(DT 
T?. AH#MttESP(Dfc&<Z>SA©A^*-# &x#l"r£o 
[0 0 5 3] 

£T, TCP-GWtC^^tlS^n^r^-^'aig-r-Sfe^lCtt, TCP-GW#SAtf>4>& 

* #> KI#g JfeflMlT** S o 
[0 0 5 4] 
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So 

[0 0 5 5] 
[0 0 5 6] 

(#5£2) IKE(7>7oi-X2T?^$tlSSA'|t#^e>#-5o O^tj, IKE SA© 
ff#£*noTV\TIPSec SAft^^bfe^^^tf^n^Sz-tCff^fc-^ 

[0 0 5 7] 

(#5£3) SA©V^*X^©^&^e>^£^ttSo 
[0 0 5 8] 

(^4) yn^PS>-ee>. ^rM-fe^rrL y ^^i?— /^SAfiHS££jE&U #3gf 

& £ e> ^ n 3? S/ - icH#fc-t & o 

[0 0 5 9] 

JKTtlt ^3 il^4 {COV>T^b<^^Sc 
[0 0 6 0] 

ftlUlC (#5$3) ICOV^M^S. Sg*l 0 1 t#g&®^5 0 lffl^t% IKE 

sA#fli5£$*iTv^hi-.5o rti*^e>ff fc-tsa#tcjg«-rs^^ipsec SA 

tt, flfcfiS*iTV^S»-^tfltitStiT^«:V%iB^i:*«feS. IPSec SAfi£3££*lT 
V^V^#^tt. «*lO10t^a'm«fif«1124 (®3#M. iZ^r^- 

5 24 (®4#m, t*a'Jf^*l«#ll (»*«3) ) ©HIT?, IKE©:7 
x-X2 IPSec SA-fetofc^fttf^V*. t*a'Jr-f 1 24 ( 

(»*^7) ) , 1 5 24H &e>©#oSADfcSPDC Zl©IPSec SAflt 
.S£^«5feb*:M3t"r««#«:ffi«'rS. IPSec SA£ Lt, :7n*S/-G>fl* 

V^^^^^otti^V^ 3. *U£SPD© selector© data sensitivity levellC* 
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[0 0 6 1] 
[0 0 6 2] 

0 1 £®m%53i5 0 1 0 1 (-fe^r^U 

^ <»#«5) , (»#«5) „ mm 

mn (»*3g6) ) £j:?j?tcp-gw4 o i~4 o 3 ^mM^^ 2>^U£ LXm.O . 

&ZfU3ri/-mife*%}m-?Z>tc.&>lZ\ l Z^ t^ra'Jr>r-9-A6 0 1 KIPSec SAff 
i^t-SMA^Srilli, S85|cl 0 l#M#»3B5fc5 0 1 tf>4>& < £ *> V% 

6 0 1 TCP-GW4 0 1 iCft^IPSec SAMSrli^UT %TCP-GW^ bT^» 

KflMtn?£S#, 5pJM-r*«M©:7B 1 0 175rS^»SB*5 0 1 # 

B«L&W , *ltf*se>J&iV\, TCP-GW^Snoop^^l±, 

fcVAGDT?, U&v^&'rte&v^ SB* 10 1, fi^5 0 1 

«k»J#»K:*BS-e^«#»ss*5 o i^««-r*t«3t"r*. *-r, 

fc-*5IPSec SAflf#&|ft»'r«fc«>K:, #i&3g*5 0 1 U a U ^ -f if— A 6 
0 1 <DmiZii$io-fr<D-te*3.V'r4 TVS/x— */a t'^a'Jf'f 
7Vfl-J/H>tt, IPSec£<ge> ttttS. f»SB*5 0 1 fct^aUf 
t-A6 0 lORTTf, ft^JlClKE SA£5i32l/> &tCAHfcESP©ff#«:ja V*<& IPSec 

SASrarSt-r*. ^©IPSec SA&ffl^T, ^ttff^5 0 1 ffl-fe^aUf -ffift* 
il 5 24frf>, 0 lOt^ra'Jf-fflNlfll 6 24 ( 

@5#f8U t*aiJr<ffll*4*#ll (»*®5) . a U 5^ 

(flt#®5) , -fe^PaU^-f (»#£6) ) IC|WT> 3§*1 0 1 

tmm^s o i ©iBr©^a^s/-^&fiF*-r* ipsec sAflMB&aHrrs. * 

^a'jf-ffifll 6 24(1 r©«#$:SPDi:SADlC|Hlti-So 
[0 0 6 3] 
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^2&TCP-GW©:fay ##J&EI v e3£>*K Jii&bfc Snoop Proxy© <fc z> £ % © *T* 
&oT%&<^©til^©ltJ£&llfc£o ££K3l±S{g*l 0 1©^D^^M 

®4 ii#i&^*5 o i ozfn vvm&m-ztb y, Esti-fe^dU^ -9- 

-;16 0 i©^n^^t^@t*feS. fcfe, ^©ll^epte-T 2 -*©^, fig 

[0 0 64] 

JgATT?. TCP-GW4 0 1 tt, *g5|cl 0 1 fcSH&Sg* 5 0 l.(0|8IflD H9 7-f y * & 
tftffibfeiilSrStiK:. IPSec SMf#fc**:x U^-f If 6 0 1 
■ I^T'tt, IKE SAlC<fcoT> JtffiCD^n^rS/-^*ES:fflF*'t6 IPSec Sk*m±L 

tv*s©t?, ipaa»i 4 2 s-eip^y^r^MTv^ntf, r©jt#©#&#;fo;fr 
*i ^§*i o i o i©W7?, ^ife%<isr&**©$M#ff;h 

*l*"Briltt* 5 *V>ii:S:a%bTV^S. tot, TCP-GW4 0 1 ©-fe-^ra U-r-W ft# 
1114 24 (^lfflt^a'Jr^fi»I (fMl, 2)) t^ra 
U^Wif-A6 0 1 ©t^raUr-ffifll 6 2 4 fc*fLT. 3g|5fc 101i:# 
0 l©im©IPSec SAfcW?-S«*fcii#-rS J^KS^tS. Mx.fc£$gf 
^101 £^i&$g*5 0 l©IP7F^©i5:MitbtffttdfaUf^ 
t-;t6 o iicfBlibTfc<z:i:t>— 

[0 0 6 5] 

t*a«Jf-ft-A6 0 lOIZ^ay^-f «**3gl 6 24H TCP-GW4 0 1 
©t^a'Jf^fifai 4 24 3^&©H*«:Sttfc'l*/aTt±, *;£S8*1 0 1 
£^tfr38*5 0 1 ©|^©IPSec SA&#3poTV*J&fcV^ : b*I*lfcV*. &1f&£>, r© 
H^fcfclPSec SA&«j£"r*fc«>© h9 7-f y * fcfcffi bTfjfcnfc*) 

t^a'Jf^«#fai 6 24{t -t©J:^*il#3y»ofei fcfc*>f A 
TO M-**T?IB*LT^T\ H^lC^e) IPSec SAflflR&fcSJglC, TCP-GW4 
0 KOt^a'Jf-f Mfil 4 2 4 1C, IPSec SA'fffg&H&t-S., 
[0 0 6 6] 

ZL©«fc-MCbT, TCP-GW4 0 1 Ot^ra'Jf -Ttt«f H 4 2 4 t^a'J 
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r>ft-/U0 10iE^zrV^^mm^Ml 6 24*^, Sg5ft 1 0 1 

5 0 l<Z)im©IPSec SA IC 5 itlfe-fe^Pay^-f 4 

2 4©SPD^SADtC|a'ltt- <5o IPA^jgU 1 4 2 3 T? 7 -f Jl $ ZWife Ut, S§5 

*1 0 1 i:'^»S8*5 0 1 ©IS©^ , n*S/-^qfiE€:fflF* , rSIPSec SA&C J: 

*y h^^oTCP©a^^$>^i:v>^^#icvy^-r-5^lc«, TCPjfiiT*±tf £ «fc 

■^JCTS. Jjfcfe, IPSec SA«*S# ««dt>f AT? XKlSg^lOl 

fc#»S8*5 0 l©R!7?©at#*«TCP-GW4 0 1 £jti®-T 6 £ *l£t§-&lCfcj: 

[0 0 6 7] 

7£IC. Z?U*Z/-%:WtmirZ> IPSec SA&SftlJBLT* Sg5fc 1 0 1 ©PEPjPJJBT :/ 
U^r-2/a>1162 (H3#I) 5 0 1 ©PEPspJfflr^U >r— >a 

>1 5 6 2 (04#i) ««a#S:ff^. T^ , y^r-S/a>T^ , n^2/-& 
fF^-T S fri?** T © fefe^mte % © T\ liTCP© n * * a > 

#tc«v^w^"5r«if*6. PEP^jmr^u^-^a^i 1 e 2^?E?mmr^v 

tr-i/nzs i 5 6 2 lc*fLT, TCT©n** S/a >8*)££fT3 i:^*. PEPjflJffiy 
^y-?r~2/a> 1 1 6 2J±. MA«UNIX©socket>f >#:7:c-^lC iot, OSIC 
MVXTCPzi* 9 i©BR. ffif^.«socket©^-^*/3> 

ICfcoT, r©TCP3*^S/a>5:^'ndr$/~^5:ft 1 ^i--5*^^§:*l^^^ 

DX>hU©Data sensitivity level selector©^ £ bTfg^^ *l 5 . flfi©sele 
ctor©H&.» destination IP address*: LT^Ifr®* 5 0 1 ©IPT K l^X. sour 
ce IP address t.L T$8* 1 0 lffllPTKl^X, UserlDil LrXPEPfflRj'TzfVfr — 
2/a>l 1 6 2 ©:x — if^SO^, Transport layer protocol £ LT TCP, IPSec p 
rotocolh LTMx.&£ AH/ESP (ffitCAH** V>ttESP#"5TtB) > source/destination 
porti: L/TM^^jK— r*#-£j&£i:fc*. IPm^BPl 1 2 2 &BtaUT^S1Z 
^raUf-fiifl 1 1 2 4tt, ffi^jIP^y h#lCSDPai> h y Sr^U *f 
fS^S IPSec SA£jltttt£ * Selector ^±^©#^#07^^^/ Mc*f btlt 86 
K:&^fe:7n*^-*f:ft«: IPSec SA##fjS"r£ 0 tStt^a'Jr-f f 

1 1 2 4 IPSec SA{C*i££*lfcy;Hf *J XAil^&^lC iot, 
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fgl 1 2 5 S:tlWtSo h^>^aK— h=e- Ft F©^^, — 

ttffr^WJJB 06 (a) <ort>rv h*#m&<Drt>ry M±'H6 (b) 

^#tt^#£*i&v><, AHSSEftfttt* IP^y*©«K_hT?©3EfbJC«fc5ft • 

[0 0 6 8] 

^©j^lCffiaStlfc-tf^ry htt, ^*RIFffl#asi 1 4 2aoT**;M?- 
* 2 0 1 tCj£«2*U HlC;i/-# 7 0 1, *?>b»7-^2 0 2Sjftftlt, TCP- 
GW4 0 1 ICgWTSo mmffllFAjjflU 14 4 6 £$£T IPA^gP 1 4 2 3 ICgJ^L 
fe^yMJ:, SPI (Security Parameter Index) „ IP destinationaddress, S 
ecurity protocol identif ier(Z)3olC<fc oT^S'JS tt-S IPSec SA<Djg)£lC^o T 

*lfc%©T*a>y, t*a!)f-fflf*«ai 4 2 4 IZ J: o T IPA*9SK:3K}£3*l*C 
US. t^a'Jf>ffifai 4 2 4tf«E$itgl 4 2 5 (3HEW#3M8 

«2) ) &&mgmi 4 2 6 (»*sn , «««p-^ft#s ( 

»*fil) ) ZfflMVX, 06 (b) tC^IPSec7\°^r 06 (a) .JCjgVT 
[0 0 6 9] 

liTcp^^^TTCp^M^^JMUT^-rs^^^^^-r^s^ me>m®. : &$zm 

-„ r©/^-yHt -fCDPWlCjSCT. TCP*** 1 4 0 2 (H*^ 
1, 2) ) 0ti-^*il4O7, TCPA^SPl 4 0 5 fcitffcfcTCPffiAfiP 1 4 
0 8-e«LaStiSo SYN/\°;r>y b&*>, Srfc&TCPii** */ a >#ta£3 

fcifLT, MUTCPffi^aJl 4 0 8 lC«rr&o 35 TCPffiijgpi 4 04fr£>SY 
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#$5 1 4 0 8&C$g1-„ HlC TCPm^Sl 4 0 4fre> J £0>-r-#/N o ;ry MC*f"T 
£ACK&jg-r (SnoopC£>^-£W:jg£fcVN) 0 » rt'fio T A°>T y h te, 

TCP-GW4 0 1 £Tj^1 0 1 il#®f^5 0 1 <DfflT?m 

TCP>?f- h4 0 l#^E«^^tirVNS„ 
[0 0 7 0] 

^TCPm^gP 1 4 0 8 «fc mCPmiJ^J 1 4 0 4 Si, Atr v h £ IPffi^jSP 1 4 
22lC$rT 0 t^ra'Jf>fflfI14 2 4H A^r y h ©A**** e>SPD©:n:/ 
h'J *mm-t2> selector^ £#T, SPD&&3I bT^-T £ IPSec SA£#£ 0 
ZLCOIPSec SAlCgg-rsff^gfcSAD^IKWLT. -£*UC]£ CTHf #lifg 1 4 2 6 
fcfgMlfgl 4 2 5 Stf/t^ry h<6H6 (b) IC^-T IPSec/\'>r y 

Y(bmz.-tZ> 0 IltHWf M'^otti, TCP-GWlC^f8£*lfcIPSec7\°>>r 
^hil, TCP-GW^bjH#$nSIPSecA>ry JSg{CM^S„ T 

CP-GW4 0 1H ACKS:*^-r§©T^^<^-t-&©TlTiE<Z)fe«)iC##3tlS 
IPSecCDAH^V>LESP(Z)^-^r>X#-^li— ^ICM^Sc e><Z>r?>T y h &, & 
J^MlFffi^gPl 4 4 2>1*h%V 2 0 3^. ^^tllFffi^BP 1 4 4 5*>e> 

[0 0 7 1] 

Snoop© Snoop proxylC^fgStlfclPSecr?^ y b Snoop pro 

xyfr e> SB 3 *l S IPSec A>5r y h CD ft^ < I^DCT'tSc 
[0 0 7 2] 

SnoopteS^ACK£(fijit-fr-riCf£T £ 3 ZltUilP*^ h»7-*l**e 

g^C^fctlSCOtl^CT^y, IPSecgfrC#tC|^g&|V^ Snoop^^COTCPjI 

•ttMZ&^tiK IPSec^Anti-replylC^oT^^T^T^tlSoTlitt^feS 
0 ZtlZffi<f=.&>lZiZ^ m.U<Dt=.&<Dl/-Vy Anti-reply? > K 1 ? 

©f5HftfCJKi;oT^<S>&M#&£ 0 i^l&O^fr^iftfcatintf, Snoop©# 
-£{C«:, IPSec/\°>r*/ e>7G©TCP/IP/\y m-i£M£&^<D'£3b-D 
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itm^o ^ot, snoop proxyizmuzMttzf~toicmmmz j *x-tevfr>&* $s 

*^^#StlfeA°^^ h"e^>SZli:liIPSec^lC#iET*^So Snoop proxytCHgf-^ 

& # < & © s Aft # & w x urn m t* ^ & o 

[0 0 7 3] 

*yh?-*20 3^M^4i7bA>?r^ Mc&gi-££, rti«*«iM3 o l 
m&-T:®Mffi3i5 0 1 lC<fcoT^#£4v5o M^IFA^gP 1 5 4 3 fcMTIPA* 
g|S 1 5 2 3 iCPMLfcA^r y Mi, SPI (Security Parameter Index) „ IP dest 
inat ion address. Security protocol identifier© 3 OlC J: oT^Slfc5tX<5 IPS 
ec SACD^iC^oTMSStlSo "fe U ^ W fSfgfS 1 5 2 4 #fgffiE#fg 1 

5 2 5 tm^mife 1 5 2 6 ZfflfflLT. ^6 (b) IC^-TIPSec/t^r y V 0 

6 (a) izm-tjxiWrv h<Dmizm-t* ^UT, A^T'y htciotv\fefi& 
, ?E?mmT7VT— i/sy 1 5 6 2iC^$tlS 0 

[0 0 7 4] 

&tC (*«4) , o£ >Jt^aUf>f -9— 7*6 0 l#IPSec SAff38££/&U 
^ 10 1 H®m$&3Z5 0 1 , £ J:tKTCP-GW4 0 1 tc£j&LfcIPSec SAf#?g£ig 

[0 0 7 5] 

^l&3gS*5 0 1 ©t^a'Jf-fiifll 1 2 4#, t^ra U ^-T "9— /* 6 0 
lCDt^aUf-ffifll 6 2 4 lC*fU SB* 1 0 1 iKDfS^^a 3f i/-©^ 
^E^fF^-TSIPSec SAfiNS&£j&"r3 <fc o K^MrT^. #»CH:IPSec££T"fe 

0{CjS£fcIPSec SA##££j£-T5£, Itllt^a y -5^ ©ffit#£ 
T% #i%^5 0 1, 0 1, 35 J:t> , TCP-GW4 0 1 CjS^^So 5 

0 llCfciu ^©^#^bT*i«t-rtl^VN 0 Sg5fcl 0 llC^fbTtt, -fe^r^U 
^6 0 l^fig^igfcUTfc^U ^iJSf 5 0 D&^i«ot%S 
V> 0 TCP-GWlC*fLT&, m%.lf®Mm%.5 0 1 0>&gfi||g2)M>>, TCP-GW4 01^ 
IPSec SkZfflm-tZ -*Sffi&(Dm^ ZmffiX^tllt. tdrayf^t-A6 0 1^ 
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S^^lC^IM"r*lli^VA 0 £^&#*UiTCP-GW4 0 1 Sgg* 1 0 1 
5 0 1 (DmoMmZ&ltiiLTfrb. t*a'Jf^*-^6 0 1 tCM^* 3 £ IC 
&5= 09 TCP-GW 4 0 1—4 0 3 tC*|#fcLT =fo#fBi-£ *\ SBflSttJBV^U iz 
^ijf-f *^e>tlSnf|g'l!£%l^<^Sc ft Sg*10 1, SlfrSH 

*501, TCP-GW 4 0 1, J; t^-fe^r U 5^ W "9— A6 0 l^tl^tl^ir^^U 
f-fffifll 1 2 4, 1 5 24, 1 4 24, £J:tfl 6 2 4 0lST'fit>^, 
— IPSec SAOff^gtf TCP-GW 4 0 1 JCSMKStlftHU #©l&fN£ (^^3) <D 

[0 0 7 6] 

dti^e>, m^.nmm^5 o n ©#g&{c4¥^TCP-GW£^x-rs 

*LS^*f^<Z)TCPll^^S/3>^<Z)##^, #tfr3g*5 0 1 lZMft*'i'£> IPSec 
SAfi|$g£, ftfOTCP-GW (Mx.«TCP-GW4 0 1) ^©TCP-GW (Mxl«TCP-GW 
4 0 2) lZB\gim<?&m-tf2b&o TCP-GW 4 0 2 te, ^1&3§§^5 0 1 • 
£i-£iHi£1&ffll,fc|gt&C, Btf<Z)TCP-GW?:fprb^©^-e^bT, /N^K^-^^I. 

mzft?frmz i &m&^im%: : m&-tz> a z\(Dt=.&>iz^&>mm-r^cp-G^^sK^ 

[0 0 7 7] 

(NR#5£A) «3S«ra;ffill6««j£vMCP-GW€:S8«'t*, 

(NR^B) *y h*7-*lftfcji^£ MMteif) #jEV>TCP-GW£fg 

£ v> o fe^Tb^x. £ 4i S . 
[0 0 7 8] 

^«r^m©^iS^SI&Jc«j:*j7N> F:T7#iB«lc&<5 (nr^a 

B) SrfUM-t^^^feSo 
[0 0 7 9] 

(NR^A) SfciMC M7LlizfU*i/mmV-A8 0 1 £fgtt£ 0 
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TCP-GW4 0 1 IZ&i&m 30U3 0 2, TCP-GW4 0 2 3 0 3 £ 3 0 4 , 

TCP-GW 4 0 3ttMM3 0 5 £ 3 0 6 (DWmWte&nZtfS bfr(Dfr&T*%a>) Z.T 

fcU, -t©fi!«&:/.n^S/«Ji-if-— o l {Cjl^i-rSo 8 

0 1 tt, TCP-GW4 0 1 £ 4 0 2 <Z)^<^)7\> K^"7. TCP-GW4 0 2^403 (Dm<D 
S\y K*7#»£L#5i:¥9Wr'rS. -ei/T. TCP-GW4 0 1 {C*f bT&TCP-GW4 
0 2tf/\y W7ff TCP-GW4 0 2{C#bT«TCP-GW4 0U40 

3 > K^" TCP-GW 4 0 3 ICjfrbT teTCP-GW 4 0 2 ffi/\> K 
^-7Mi:ftS3i: fcilfcl-r*., me>©M3Stt, TCP-GW4 0 1~4 0 3 (DTCP 
/\>Ft7MHl4 1 0 ^^n^i/^S-^-^S 0 1 Kl-J:oTfft>*l*. fct>5 
A,, TCP-GW4 0 1 ~4 0 3 lC*fbT, ^ *l e><Dffi#£#irt*^5£^£ r £ =fc»Tfg 

[0 0 8 0] 

(NR#5£B) £11^5 J: ? &#JB##*. 

o 

[0 0 8 1] 

£T<DTCP-GW#2inA«v;i/^3f -YX h £Vl/-^£)£«bT;i3£, #TCP-GW© 
TCPA> K^^M^Il 4 1 O^TTL5:5g^C^IISSL/feV^/^^rYXbA^ry h$r^ 

StM^lc^-^x *y :/ifc<D^& ^TCP-GW fc^-Tci*: # 

[0 0 8 2] 

fciJ^-f SlPSec SACDTT\ TCP-GW 4 0 1 £:frbT, TCPIC «fc SiHt^^o T V> 

stts. 7°n^j/-A> K■*7^cfP'5^^f*©§l«l/^c^4v^<o3^ct)^ux-s/ 
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